10 results · Feed
-
High 7.8CVE-2026-96889 Public exploit
Librsvg: use-after-free when xml includes have duplicated entities
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that …
-
Unscored —
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to…
-
Unscored —
In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when pass…
-
Unscored —
A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of…
-
Unscored —
The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to cause a den…
-
Unscored —
The _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to…
-
High 7.5
librsvg DoS via Cyclic References
librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack consumption, and application crash) via cyclic references in an SVG document.
-
Unscored —
The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of se…
-
Unscored —
GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external e…
-
Unscored —
librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to caus…